[SSSD] more terminology questions

David O'Brien davido at redhat.com
Fri Jun 18 04:09:55 UTC 2010


David O'Brien wrote:
> This time I'm wrestling with "native LDAP" vs any other sort of LDAP, 
> and where does MS Active Directory fit in?
> 
> afaik "native LDAP" just means LDAP provides the identities and does the 
> authentication. 

ok, that's wrong, having just read a bit harder:

"* Should provide an example of using the native LDAP provider with a 
custom PAM stack [for authentication]".

So basically I don't know what native LDAP is.

If I'm using OpenLDAP or 389 that's easy enough. Switch
> to IPA and Kerberos does the auth (= not native LDAP, right?). What if 
> I'm using MS Active Directory? Does that or can that do both? Does it 
> provide identities and rely on Kerberos for auth? Should I not be using 
> "native LDAP" at all to avoid confusion?
> 
> "native" also comes up in the bug report* in relation to Kerberos:
> "Should provide an example of using the proxy identity provider in 
> concert with the native Kerberos authentication." What's "native Kerberos"?
> 
> That's probably enough for now. Remind me why I gave up coffee...?
> 
> *https://bugzilla.redhat.com/show_bug.cgi?id=601870





More information about the sssd-devel mailing list